$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa File: 8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa (raw, json) Hash identifier: qGX/dFlh69N6iiWKzbR9vY/kL6b+Tw8yvbVVZDuUg1o= Subject key identifier: D0:BA:7F:38:1F:DF:C0:46:55:7C:27:17:3D:33:D5:52:DE:62:65:92 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584902EC1A891F0B4B197DDEC180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 13576 IP address blocks: 66.128.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1a:89:1f:0b:4b:19:7d:de:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=a7086594-c8f7-44aa-8539-8f2b883243b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:62:6f:69:76:73:26:cb:9e:d1:db:6c:f1: 29:31:6f:3a:76:c2:19:db:28:7b:59:31:78:47:11: 36:6f:d5:b4:98:1e:b9:dc:93:a9:52:d1:6f:61:b6: 28:92:c1:cf:20:1f:40:7f:6f:c2:33:57:8c:a9:ff: db:47:c9:48:ee:04:e6:9b:03:67:40:2b:85:e1:25: dd:bd:bf:2b:fc:bb:db:b1:c2:cc:34:5b:d6:3d:f4: c0:4d:e2:2b:a7:98:2a:d5:ed:42:0c:52:a9:f6:aa: a4:23:3f:52:85:28:90:65:31:97:87:50:19:1d:61: 4e:e8:d6:bd:5d:4f:cc:cd:8a:1d:e8:ec:b5:bd:a4: 9e:ed:1a:e4:5f:63:62:96:f0:d4:cf:ed:85:d6:a5: c9:43:5a:aa:36:db:0b:34:51:34:aa:0c:d5:8c:08: 25:4e:aa:d3:de:d9:30:32:90:b3:56:25:a0:a6:2a: 7d:01:c4:a3:c4:78:6d:28:74:91:8b:12:97:e9:98: 13:53:a4:03:7c:cf:b3:a1:bd:43:f6:f8:e2:a0:73: 2a:10:0b:7f:aa:a8:f4:4e:09:98:05:b2:11:29:d6: 60:ac:4d:72:48:e0:54:69:2f:b3:cd:46:94:4e:67: 28:ae:5d:f5:f4:b8:81:40:c4:fa:5a:e4:89:7d:27: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:7F:38:1F:DF:C0:46:55:7C:27:17:3D:33:D5:52:DE:62:65:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:02:a6:58:94:ed:3d:ef:8b:c6:01:e0:b8:47:d0:da:12:f1: da:a2:d3:2c:3b:36:1b:82:38:38:fa:c5:bf:fc:4e:32:6c:d3: 15:a6:01:3e:b3:a8:8e:57:f3:74:8f:31:ad:6f:a4:d6:7f:2a: f4:7a:8d:97:50:5a:05:a1:65:a7:96:00:5c:dc:bf:8d:e6:48: 61:cf:24:fd:61:99:8b:40:ba:7e:de:4b:66:b0:96:5f:25:2c: 3b:52:f9:fd:65:a4:3a:a0:7f:87:51:aa:c8:b2:a5:c5:a4:29: c5:55:77:d7:08:25:cf:2c:55:54:bb:35:24:c3:c6:f7:5a:9e: 35:34:9f:b2:3a:c5:9f:c5:93:07:bb:b1:7c:b3:52:7f:63:2a: 19:3d:6f:9a:c3:f8:b2:33:d7:b4:52:0c:2f:29:6e:5e:a4:37: 0e:fe:df:3f:fe:ca:9e:3e:96:ba:8f:63:53:87:78:25:5a:d8: 2d:97:ac:aa:b4:bd:91:fe:9e:1c:be:a6:1c:32:0e:ec:39:4e: a0:7d:f8:4d:8e:75:9e:3f:24:b1:dd:d6:91:cc:2f:70:b7:2b: 52:c5:e5:98:4d:ff:69:67:98:7e:ed:28:cf:08:8c:94:69:1a: 4c:91:de:c5:6b:25:b2:2b:b8:b4:5d:e7:db:ec:ee:83:b6:da: 4e:c6:80:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BqJHwtLGX3ewYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YTcwODY1OTQtYzhmNy00NGFhLTg1MzktOGYyYjg4MzI0M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMdib2l2cybLntHbbPEpMW86dsIZ2yh7WTF4 RxE2b9W0mB653JOpUtFvYbYoksHPIB9Af2/CM1eMqf/bR8lI7gTmmwNnQCuF4SXd vb8r/LvbscLMNFvWPfTATeIrp5gq1e1CDFKp9qqkIz9ShSiQZTGXh1AZHWFO6Na9 XU/MzYod6Oy1vaSe7RrkX2NilvDUz+2F1qXJQ1qqNtsLNFE0qgzVjAglTqrT3tkw MpCzViWgpip9AcSjxHhtKHSRixKX6ZgTU6QDfM+zob1D9vjioHMqEAt/qqj0TgmY BbIRKdZgrE1ySOBUaS+zzUaUTmcorl319LiBQMT6WuSJfSfbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC6fzgf38BGVXwnFz0z1VLeYmWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOGQ5OTdhZTQtYThiZi0z MjQ5LWE4MjctZThkODc4NWRhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0CpliU7T3vi8YB4LhH0NoS8dqi0yw7NhuCODj6xb/8TjJs0xWmAT6z qI5X83SPMa1vpNZ/KvR6jZdQWgWhZaeWAFzcv43mSGHPJP1hmYtAun7eS2awll8l LDtS+f1lpDqgf4dRqsiypcWkKcVVd9cIJc8sVVS7NSTDxvdanjU0n7I6xZ/Fkwe7 sXyzUn9jKhk9b5rD+LIz17RSDC8pbl6kNw7+3z/+yp4+lrqPY1OHeCVa2C2XrKq0 vZH+nhy+phwyDuw5TqB9+E2OdZ4/JLHd1pHML3C3K1LF5ZhN/2lnmH7tKM8IjJRp GkyR3sVrJbIruLRd59vs7oO22k7GgFc= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:13 2025 by rpki-client